polerio-plus[.]com

The domain polerio-plus.com was registered on 21 February 2026 through the registrar Name SRS AB. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc., and is geolocated in the United States. The authoritative nameservers hans.ns.cloudflare.com and simone.ns.cloudflare.com confirm that the domain is hosted behind Cloudflare's edge network. No TLS certificate is presented for the host, indicating that HTTPS is not configured.

The HTTP response presents the page title “Suspected phishing site | Cloudflare”, which is a default block page issued by Cloudflare when a resource is taken offline. The current status of the domain is recorded as offline, and it is listed on a single security blocklist as well as being blocked by the PhishDestroy service. Reputation services have assigned a trust score of 0 out of 100 in Gridinsoft’s rating, and AlienVault OTX references the domain in one threat‑intelligence pulse. VirusTotal analysis shows that one out of ninety‑five scanning engines reported a detection, confirming the presence of malicious activity according to at least one vendor.

The limited detection footprint—only one vendor flag, a single blocklist entry, and a solitary OTX pulse—suggests that the campaign may be in early stages or that monitoring coverage is sparse. Defenders should continue to monitor the domain’s DNS and IP address for any re‑activation, enforce blocking of the IP 188.114.96.3 and the domain itself in perimeter defenses, and consider adding the domain to internal blocklists. Because the site currently returns a Cloudflare block page, any attempt to access it will be denied, but the underlying infrastructure remains capable of serving phishing content should the operator reactivate the site.